NetSight
IP …
medium5.9

CVE-2011-2487

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Impact

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Affected products

VendorProductAffected versions
ApacheCxf
from 2.4.0 through 2.4.6
from 2.5.0 through 2.5.2
ApacheWss4j
before 1.6.5
RedhatJboss Business Rules Management System
Version 5.3
RedhatJboss Enterprise Application Platform
Version 5.0.0
RedhatJboss Enterprise Application Platform Text-Only Advisories
All versions
RedhatJboss Enterprise Soa Platform
Versions 4.2.0, 4.3.0
RedhatJboss Enterprise Web Platform
Version 5.0.0
RedhatJboss Middleware Text-Only Advisories
All versions
RedhatJboss Portal
Version 4.0.0
RedhatJboss Web Services
All versions

Weakness classification

CWE-327

References